GHSA-r4hg-4cpq-q57c

jSuites subect to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-25979

Packages

Ecosystem	Package	Affected	Fixed in
npm	jsuites	< 5.0.1	5.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-25979 advisory
https://github.com/jsuites/jsuites/issues/134 web
https://github.com/jsuites/jsuites/commit/b31770d5fe91684a00177f629aab933139c32d9f web
https://github.com/jsuites/jsuites package
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253331 web
https://security.snyk.io/vuln/SNYK-JS-JSUITES-3226764 web